This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
File: f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json)
Hash identifier: z7yaZ3f/g9zFJPGjDFXi1GWsVxmqPmsP4hxuWsvNcLM=
Subject key identifier: 42:9F:E9:6C:2D:79:5E:0C:44:5E:A6:84:86:CF:21:4A:46:3F:15:A6
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F4328584C3EABB3A0A30B8215384DB200
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 0
IP address blocks: 2620:10f:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:b3:a0:a3:0b:82:15:38:4d:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=3a4e2b15-18f2-4f82-9079-69ee4ca20903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:48:4e:c8:7d:92:26:d0:19:44:72:28:ac:
9c:80:69:b1:39:87:ed:0f:3c:3c:53:51:6c:5c:09:
e6:95:90:31:d7:af:40:4e:88:01:6a:aa:42:11:f0:
9f:94:19:b1:91:47:95:4c:0e:55:0d:72:f8:a4:11:
36:a3:f2:7e:5a:bd:c5:26:d8:64:5a:91:b6:1c:17:
e0:87:b0:21:75:ea:53:e0:82:4c:47:11:c7:93:ce:
fb:cc:bc:3b:1f:af:c1:38:0e:6c:8c:77:94:29:fa:
b9:dc:d5:f1:15:f2:99:a7:a5:8a:2b:b9:87:2c:e4:
d0:94:c1:09:b2:87:2f:d8:12:2f:f7:6e:ca:18:40:
8a:9b:c4:43:42:d5:36:b5:36:de:bc:09:d2:2c:98:
e6:5c:52:96:ed:f5:fd:f3:1f:4c:d0:43:37:33:00:
81:fe:4c:71:1b:46:e8:0c:28:10:1b:4b:10:a5:af:
47:8e:bc:03:e6:3e:4d:56:03:11:b4:d0:a5:85:b4:
85:7f:08:cd:52:b7:45:2c:95:3a:11:67:ce:87:b2:
b1:28:4a:62:f2:9b:39:58:36:1c:48:ee:ad:d5:69:
a4:35:2c:0d:5d:a2:71:81:9a:f0:c5:e8:46:cb:8e:
99:53:66:22:0b:7b:db:ba:55:8b:47:e5:4d:28:34:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:E9:6C:2D:79:5E:0C:44:5E:A6:84:86:CF:21:4A:46:3F:15:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:b000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:8e:27:9f:7f:ac:d3:7e:3c:ac:7f:43:a3:6b:6c:2b:06:2c:
d8:19:e9:51:ba:71:d1:18:3d:ed:6d:51:91:4c:d6:1c:93:1a:
50:7e:31:3a:b9:ab:ce:c8:80:eb:9f:09:db:d5:f8:5a:4e:8f:
cc:10:cc:fe:8e:4d:24:1d:e0:14:4f:98:86:d3:d0:f5:d4:38:
3a:0a:e9:e9:27:4b:11:72:6e:21:b4:46:de:49:49:1f:15:8e:
34:7f:43:ab:d6:69:84:34:69:14:b9:4a:ee:08:f6:ba:d6:cc:
e1:1b:f2:b1:e5:c2:58:34:f1:97:07:0a:e4:f4:9c:b3:d5:3f:
10:6e:22:75:e0:b9:b4:11:5d:d7:24:00:e7:5d:b6:0a:6f:c6:
9f:0d:61:69:50:e2:d4:2e:6e:4e:c8:3b:48:19:99:d8:04:85:
01:ca:59:45:20:02:d3:fd:5b:ac:2d:d2:b9:75:1a:14:9d:60:
df:ac:67:87:7f:55:51:68:9e:28:15:30:e0:7d:ee:2b:3b:65:
c1:18:9c:d2:c4:98:c4:e1:a1:76:7e:cd:7d:90:bc:2c:80:46:
bf:28:f3:08:10:16:4d:52:51:c4:60:a1:7f:e1:1b:58:0a:bb:
5c:6d:00:80:c3:c3:ef:48:d2:12:23:47:ba:0e:63:29:d2:24:
4e:45:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:12:40 2025 by rpki-client